News & Sicurezza

CVE ID : CVE-2026-28196 Published : Feb. 25, 2026, 2:16 p.m. | 52 minutes ago Description : In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28195 Published : Feb. 25, 2026, 2:16 p.m. | 52 minutes ago Description : In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3185 Published : Feb. 25, 2026, 2:16 p.m. | 52 minutes ago Description : A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown function of the file /api/admin/sys-message/ of the component API Endpoint. The manipulation of the argument messageId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. Upgrading to version 1.3.3-beta is able to address this issue. The patch is identified as aefaabfd7527188bfba3c8c9eee17c316d094802. The affected component should be upgraded. The project was informed beforehand and acted very professional: "We have implemented message ownership verification, so that users can only query messages related to themselves." Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3186 Published : Feb. 25, 2026, 2:16 p.m. | 51 minutes ago Description : A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/password/ of the component Password Reset Handler. This manipulation of the argument userId causes use of default password. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.3.3-beta addresses this issue. Patch name: aefaabfd7527188bfba3c8c9eee17c316d094802. It is suggested to upgrade the affected component. The project was informed beforehand and acted very professional: "We have added authorization validation to the password reset interface; now only users with the corresponding permissions are allowed to perform password resets." Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28194 Published : Feb. 25, 2026, 2:16 p.m. | 52 minutes ago Description : In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28193 Published : Feb. 25, 2026, 2:16 p.m. | 52 minutes ago Description : In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Kritiek UPnP-lek in Zyxel-routers kan remote aanvallers toegang geven Een kritieke kwetsbaarheid in de UPnP-functie van verschillende routers, wifi-extenders en andere netwerkapparaten van Zyxel maakt het mogelijk voor een ongeauthenticeerde aanvaller om op afstand toeg ... Read more Published Date: Feb 25, 2026 (22 hours, 59 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-13942

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301.

CVE ID : CVE-2026-2624 Published : Feb. 25, 2026, 1:16 p.m. | 1 hour, 52 minutes ago Description : Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-21725 Published : Feb. 25, 2026, 1:16 p.m. | 1 hour, 52 minutes ago Description : A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so. This requires several very stringent conditions to be met: - The attacker must have admin access to the specific datasource prior to its first deletion. - Upon deletion, all steps within the attack must happen within the next 30 seconds and on the same pod of Grafana. - The attacker must delete the datasource, then someone must recreate it. - The new datasource must not have the attacker as an admin. - The new datasource must have the same UID as the prior datasource. These are randomised by default. - The datasource can now be re-deleted by the attacker. - Once 30 seconds are up, the attack is spent and cannot be repeated. - No datasource with any other UID can be attacked. Severity: 2.6 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-0704 Published : Feb. 25, 2026, 1:16 p.m. | 1 hour, 52 minutes ago Description : In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25701 Published : Feb. 25, 2026, 12:16 p.m. | 2 hours, 52 minutes ago Description : An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to possible private information found in /var/lib/pcrlock.d * manipulate the data backed up in /tmp/pcrlock.d.bak, therefore violating the integrity of the data should it be restored. * overwrite protected system files with data from /var/lib/pcrlock.d by placing symlinks to existing files in the directory tree in /tmp/pcrlock.d.bak. This issue affects sdbootutil: from ? before 5880246d3a02642dc68f5c8cb474bf63cdb56bca. Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...